All the latest UK technology news, reviews and analysis

Icann security group calls for end to 'wildcarding'

by Phil Muncaster

23 Jun 2009

Be the first to comment

  • Tweet this
Icann
Icann has been told that wildcarding can erode trust and create opportunities for malicious attacks

Security advisors to the Internet Corporation for Assigned Names and Numbers (Icann) have called for a ban on the practice of 'wildcarding', in which internet service providers and registrars redirect queries for inactive domains to their own holding pages.

The Security and Stability Advisory Committee (SSAC) presented its report, entitled Recommendation to Prohibit the Use of Redirection and Synthesized Responses by New Top-Level Domains (TLDs), at an Icann meeting in Sydney yesterday.

The report argues that wildcarding can erode trust and create opportunities for malicious attacks, and calls on Icann to prohibit such practices among new generic TLDs and country code TLDs.

The SSAC also advises Icann to relay these concerns to third parties, to ensure that the dangers of wildcarding are understood.

"SSAC reiterates its position that synthesised Domain Name Server [DNS] responses at the TLD level (and subordinate levels) is a destabilising practice, " the report said.

"It also creates opportunities for DNS abuse that can be easily avoided and should be prohibited at TLD registries. We urge Icann and the global DNS community to find appropriate mechanisms to ban this practice at the TLD level. "

In related news, the influential Number Resource Organisation (NRO), which is formed from the world's five Regional Internet Registries, called for an end to the collaborative agreement between Icann and the US Department of Commerce.

The current agreement expires on 30 September, and the NRO wants a more " industry-driven, multi-stakeholder approach", according to NRO chairman Adiel Akplogan.

"We believe that the principles that have guided the management of the DNS until now will enable the growth and development of the internet in the future, and advise that US government involvement in Icann is no longer necessary," he said.

The European Union has already called for the US to hand over control of Icann to an independent body.

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

Flame virus poll

Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?

37%

0%

10%

53%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Symanteccloud

Social networking: a guide for IT managers

Social networking is almost ubiquitous. This white paper examines the benefits and risks and it looks at the different ways companies can reconcile them

Riverbed

Mitigating the risks of IT change

The importance of understanding your infrastructure

Oracle E-Business Analyst / Functional Consultant - Supply Chain

Oracle E-Business Analyst / Functional Consultant - Supply...

SAP ERP APO, EN/FR, Brussels

SAP consultant Production: SAP MM, IM, PP, APO, Brussels...

Oracle DBA / London

Full time DBA with 5-10 years experience will be preffered...

Software Development Manager - Scottish Borders

Software Development Manager - Scottish Borders Agile...

To send to more than one email address, simply separate each address with a comma.